CVE-2006-0812

The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-02-23

Last modified

2024-08-07

Affected products

• Visnetic Antivirus Plug-in For Mail Server (Visnetic)

References

• http://secunia.com/advisories/16583
• http://secunia.com/secunia_research/2005-65/advisory/
• http://securitytracker.com/id?1015670
• http://www.securityfocus.com/archive/1/425890/100/0/threaded
• http://www.securityfocus.com/bid/16788
• http://www.vupen.com/english/advisories/2006/0701
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24928